$ rpki-client -vvf rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/8DB2B8E6E27F11EEA6719536C4F9AE02.roa File: 8DB2B8E6E27F11EEA6719536C4F9AE02.roa (raw, json) Hash identifier: lKb0rShsvsq6/PiRFV9WYxvr2Wk6w8LZDzoWqk9lB7U= Subject key identifier: 2E:21:2E:5C:DA:1B:2E:2A:87:50:65:7C:DE:F6:69:90:C8:99:AB:57 Certificate issuer: /CN=A911DA4A/serialNumber=7892064DD45B97ED09471EB05451EAC098C9CB3D Certificate serial: 1C1E Authority key identifier: 78:92:06:4D:D4:5B:97:ED:09:47:1E:B0:54:51:EA:C0:98:C9:CB:3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJIGTdRbl-0JRx6wVFHqwJjJyz0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/8DB2B8E6E27F11EEA6719536C4F9AE02.roa Signing time: Fri 15 Mar 2024 03:53:16 +0000 ROA not before: Fri 15 Mar 2024 03:53:16 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 16509 IP address blocks: 103.81.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.crl rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJIGTdRbl-0JRx6wVFHqwJjJyz0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 16:38:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7198 (0x1c1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DA4A/serialNumber=7892064DD45B97ED09471EB05451EAC098C9CB3D Validity Not Before: Mar 15 03:53:16 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=65f3c62c-5c39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:1e:87:67:54:ae:f3:9a:3c:3d:95:7e:86:80: 38:df:36:46:97:ba:3e:5a:a5:18:76:bd:5f:51:fb: dc:9d:57:37:b7:4b:89:87:ef:3d:87:90:f4:f2:e6: 7b:e2:56:ab:b7:f2:45:0d:53:24:2c:79:be:59:b0: a4:21:28:b5:50:ee:c0:4a:7e:ab:3c:87:41:1a:fc: 2a:10:0e:cc:e7:84:05:f6:36:6c:b8:b6:4c:b3:6b: ac:7f:30:44:de:a7:ea:c4:09:46:62:c6:3c:fc:50: a2:6f:fd:30:6a:7e:05:87:c7:72:31:e9:b3:17:2d: 52:05:b0:58:d0:1c:47:95:a6:d2:1f:a9:52:3a:e6: 33:28:55:50:25:f6:c2:de:1e:ff:67:d1:f3:17:1a: 0b:1c:09:76:0d:7c:2f:34:91:56:36:82:8b:1a:cb: 63:c7:e3:6c:68:ea:ef:a7:4d:83:be:8a:d3:42:a5: c8:ec:ee:22:d0:0f:8f:c4:9e:c6:ea:a1:72:17:98: 00:f9:9a:07:35:1e:ad:ff:31:92:eb:ca:37:c2:ec: 02:94:be:ba:2e:29:44:32:dd:b9:17:94:c1:5b:31: 1d:bd:32:df:69:83:cc:96:af:b2:27:ce:c7:17:9a: 49:1a:36:b8:03:22:98:70:bc:e6:8c:92:5c:7f:7b: 89:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:21:2E:5C:DA:1B:2E:2A:87:50:65:7C:DE:F6:69:90:C8:99:AB:57 X509v3 Authority Key Identifier: keyid:78:92:06:4D:D4:5B:97:ED:09:47:1E:B0:54:51:EA:C0:98:C9:CB:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJIGTdRbl-0JRx6wVFHqwJjJyz0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/8DB2B8E6E27F11EEA6719536C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.81.52.0/24 Signature Algorithm: sha256WithRSAEncryption 33:00:f5:a4:3f:29:41:ff:d7:8c:1a:3c:82:58:a1:1a:0f:82: 62:c1:f0:8d:bf:ea:bc:a5:c0:4e:03:7f:36:90:8c:1d:58:6c: a7:72:55:9b:0e:25:a7:1c:d8:7e:3b:86:3f:58:e1:4a:a8:d3: b8:c9:f9:a8:68:b8:5e:d0:bc:1d:c7:44:17:2c:70:28:91:1a: 73:a1:01:90:c7:fc:a2:3b:55:db:b0:a8:36:1d:87:f6:39:08: 33:37:44:d8:b9:e1:37:8b:be:7f:2f:ee:1c:e4:e4:b0:62:0c: 47:12:d0:9e:cf:8c:b6:52:b5:fa:13:0a:2f:95:b3:44:a1:b6: 3d:b0:9d:bb:a5:e7:49:87:00:18:34:28:4c:1d:82:3c:2f:d7: a6:66:2f:6f:99:1c:47:8f:27:6c:56:bb:cf:21:87:bb:d9:c1: f7:de:b3:e6:7a:ee:14:e0:a2:80:c0:62:07:15:a8:ac:4f:74: 0a:bd:27:be:ed:77:c1:f5:86:e2:a2:aa:ce:dd:20:a5:2a:a2: cb:7b:8c:f8:54:47:43:13:87:f3:c4:5f:01:7f:e0:6e:2b:51: 56:34:ed:11:31:ec:88:76:36:01:a0:c8:db:04:09:55:dd:9e: 6d:30:39:15:7f:c8:80:d0:05:bd:90:e2:16:bf:c3:b5:48:85: 5e:99:ac:87 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICHB4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURBNEExMTAvBgNVBAUTKDc4OTIwNjRERDQ1Qjk3RUQwOTQ3MUVCMDU0NTFFQUMw OThDOUNCM0QwHhcNMjQwMzE1MDM1MzE2WhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWYzYzYyYy01YzM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3B6HZ1Su85o8PZV+hoA43zZGl7o+WqUYdr1fUfvcnVc3t0uJh+89h5D08uZ7 4lart/JFDVMkLHm+WbCkISi1UO7ASn6rPIdBGvwqEA7M54QF9jZsuLZMs2usfzBE 3qfqxAlGYsY8/FCib/0wan4Fh8dyMemzFy1SBbBY0BxHlabSH6lSOuYzKFVQJfbC 3h7/Z9HzFxoLHAl2DXwvNJFWNoKLGstjx+NsaOrvp02DvorTQqXI7O4i0A+PxJ7G 6qFyF5gA+ZoHNR6t/zGS68o3wuwClL66LilEMt25F5TBWzEdvTLfaYPMlq+yJ87H F5pJGja4AyKYcLzmjJJcf3uJJQIDAQABo4IClTCCApEwHQYDVR0OBBYEFC4hLlza Gy4qh1BlfN72aZDImatXMB8GA1UdIwQYMBaAFHiSBk3UW5ftCUcesFRR6sCYycs9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREE0QS83MjU3RjkzMkJD QjAxMUU2OTk4RTgyNTZDNEY5QUUwMi9lSklHVGRSYmwtMEpSeDZ3VkZIcXdKakp5 ejAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VKSUdUZFJibC0wSlJ4NndWRkhxd0pqSnl6MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MURBNEEvNzI1N0Y5MzJCQ0IwMTFFNjk5OEU4MjU2QzRGOUFFMDIvOERCMkI4RTZF MjdGMTFFRUE2NzE5NTM2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnUTQwDQYJKoZIhvcNAQELBQADggEBADMA9aQ/KUH/14wa PIJYoRoPgmLB8I2/6rylwE4DfzaQjB1YbKdyVZsOJacc2H47hj9Y4Uqo07jJ+aho uF7QvB3HRBcscCiRGnOhAZDH/KI7VduwqDYdh/Y5CDM3RNi54TeLvn8v7hzk5LBi DEcS0J7PjLZStfoTCi+Vs0Shtj2wnbul50mHABg0KEwdgjwv16ZmL2+ZHEePJ2xW u88hh7vZwffes+Z67hTgooDAYgcVqKxPdAq9J77td8H1huKiqs7dIKUqost7jPhU R0MTh/PEXwF/4G4rUVY07REx7Ih2NgGgyNsECVXdnm0wORV/yIDQBb2Q4ha/w7VI hV6ZrIc= -----END CERTIFICATE-----Generated at Thu May 2 17:43:03 2024 by rpki-client on console-fra.rpki-client.org